Check out the latest browser attack stats and analysis from Push Security detections. Malicious versions of the Admin Menu Editor Pro plugin for WordPress have been distributed to more than 200 ...

A Brevo supply-chain attack used compromised Cloudflare access to inject malware into websites, potentially affecting over 100,000 sites.

Chainguard, the trusted source for open source, today announced Chainguard Libraries for Go and Chainguard Libraries for .NET, adding coverage for two new language ecosystems that allow engineering ...

Bloom Security uncovered a flaw in npm Trusted Publishing that exposed 1,500+ packages to potential malicious takeovers via ...

"We don't have our own servers and we leave it to a secure major cloud provider, so we are safe." Are you being too ...

Brevo supply-chain attack injected malicious JavaScript into 100,000+ sites, targeting WordPress admins and visitors with ClickFix prompts.

A slug flaw in npm Trusted Publishing exposed 1,500+ packages with 10m downloads. Bloom Security on what it means when AI ...

Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites to distribute malware.

Ledger hardware wallet supply chain attack: physical implants found in CryptoBilis-distributed devices have drained $92.9 ...

If you bought a Ledger less than 6 months ago from one of these resellers, it may be wise to move your assets to safety until ...

Trezor is cutting its authorized reseller network after supply-chain incidents, dropping CryptoBilis and saying its devices ...